REMARKS 



This Amendment is submitted with a Request for Continued Examination (RCE) filed on 
April 27, 2009. Claims 1-21 arc cancelled, and Claims 22-41 are added. Upon entry of the 
present Amendment, Claims 22-41 will now be pending; 

As stated above, in this Amendment, Applicants liave cancelled Claims 1-21 trom farther 
consideration m this application to facilitate expeditious prosecution of the application. 
Applicants arc not conceding that the subject matter encompassed by the claims prior to this 
Amendment is unpatentable over the ai-t cited by the Examiner. Applicants respectfully reserve 
the right to pursue claims in one or more continuing applications, including claims capturing the 
subject matter encompassed by Claims 1-21 prior to this Amendment and additional claims. 

K^iecti&ns Under 35 g 102 

On page 3 of the March 3 , 2009 Final OfBce Action, Claims 1, and IS were rejected 
under 35 IJ.S C § 103(a) as being unpatentable over Re^hef, el al (U.S. Patent Application 
Publication No 200^/0233581 - "Re^hef) m viev% of Magdvch ei al (US Patent \o 

7.096,503 - ''Magdydf'). On page 6 of the Fmai OfiH-ce Action, Claims 2, 9, ajid 16 were 
rejected under 35 U.&.C. 103(a) as being unpaientable over Reahef m view ot Magdvch and 
Applicants A.amiited Prior Art ("AAPA' ). On page 7 of the I-inal Ofiice .4clian. Cbiras 2-6, 19- 
13, and 17-20 wcic lejccted undei 35 U S C. § 103(a) as bemg unpatentable ovei Rc^hef^n \isw 
of Magdych and further \Hew of Neelay, ei al (U.S Patent Application Publication No 
2004''0064722 ~ "Ac^e/ay") On page 10 of the Final Office Action, Claims 7, 14, and 21 were 
leiected undei '^5 U S C § 103(a) as bemg unpatentable ovei Reshef m view of Magdyeh and 
lurllei of ( cckn a at (U S Patent \prhcatiOL Pubhuitioii No 2003/0236994 - 

"''Cedar "). Claims 1-21 are now cancelled, and thus these rejections are moot. 

Witli respect to exemplafy new Claim 22, a combination of the cited art does not teach or 
suggest: 

A niethod coi-nprising: 
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' geneiatmg b\ a fiist \iiine{<ibiltt\ analysis and toiUlication (VAF) agent operating m a 
hardware-based system' (supported in tfie ongmally filed speeificatioi) at paragraph [0030]), "a 
[nsi piote^v icpic^cni ilioj oi a iiisi rn n \ ^um the tu&t pieces'^ Lompii=es a "series ot 

si.qaorii J v pn H ». ii I nl lit lepie-^ti.icd hs muUiple nodos ni tht Iiim piotc^s icpicscntation 

and whci-^i 1 1 iij si \ \i ^<^cnt mouituis the fiist procc&s for security exposures," (supported m 
paragi-apli fOOi:)] of the originally filed specification) 

'defining legal and illegal interfaces between the multiple nodes m the first process 
Kpic-,^ntaUii wlieiein a legal interface between a tiist node 'nd a SLCond node m the first 
Pa.o^.cs^ t^pi^scutatjon reflects an authoiizaiion foi c^pe ion ^t-^Ksei 'cd o\ tht fiist node and 
the second nodt to be ^inktd and wht'uin at ilk i m ii li l si lack oi iuthou/ation ioi 
operaiiuns lepresenied b'v ilie first node and tht iCvond node to e\ei be drectl> linked ' 
(supported m paragraph [0015]) 

"generating, by a second VAF agent a second process representation of a second 
process;" Csuppoited tn pa;ragfaph [0015]) 

companng nodes fiom the first pioccs^ i p sen itjon to nodes ot ilu s ^< n i piocess 
icpiCi>e.natton whciein the ^^econd VAF <^n' i om ns the second ptokts ioi secuuty 
exposnres;" (supported in paraarapn [0026]) ana 

' in lesponsc to the i odes ot ihe tir^t process icpicscnlanon mat».htng nodes in the second 
process representation, sending an alert from the first VAF agent to the second VAF agent, 
wheiem the alert identifies the illegal interfaces between nodes m the first process representation 
as potential illegal mtu faces between nodes m tlic second pioccss representation ' (supported in 
paragmphs [001 1] and [0026]). 

With respect to exemplary new Claim 22. a combination of the cited art does not teach or 
suggest '•wherein the icgai interface furilier rcllects a re quisite action in the first node that is 
requircd to reach tlic second node, and wherein tlie illegal interface further reflects an absence of 
the requisite action in the first node", as supported in paragraph [0015] of the original 
specification. 

Wiih xespecl io exemplary new Cliihn 24, a combination of' the cited an does not teacii or 
suggest '^wherein the legal interface further reflects a requisite r eturn code being transmitted 
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from the second node to tlie first node, wherein the requisite return code is transmitted in 
response to a password being sent from the first node to tlie second node", as supported in tide 
original specification in paragraph [0010]. 



With respect to exemplaiy new Claim 25, a combination of the cited art does not teach or 
suggest: 

"in response to the first VAF agent detecting the illegal interface, creating, by the first 
VAf-' agent, a securit -y palch that prohibits the first lujde frora being linked to the second node;" 
(supported in the original specification in paragraph [0026]} and 

"'transiTiitiing tlie security patch from the first VAF ^ent to the second VAF agenf 
(supported in paragraph [0026]). 

With i-espect to exemplar)' new Claijn 26, a combination of the cited art does not teach or 
suggest: "wherein the first process and the second process are: component parts of a single 
distributed software system "., as supported in the origiiml speciSeation in paragraph [0011]. 

With respect to exernplary new Cimm l?, a conibinatioh of the cited art does not teach or 
suggest "wherein tihe first process represenMion and the second process representation are 
derived firom an extensible markup language (XML) deseription of the respective .fiinst process: 
and the second pfoeess", as supported in the orlgind spe^^^ in paragraph [0015] . 

With respect to exemplary^ new Claim 28, a combination of tlie cited art does not teach or 
suggest "wherein the XML descilption of tlie first process is stored in a security ser\'er that is 
protected by a first firewall detection system , and wherein the XML description of the second 
process is stored in the security server and is protected by a different second firewall detection 
system ", as supported in the original specification in paragraphs [001 3] ~ [0014] and by elements 
112, 114, 120, 122, and 126 in FIG. I . 

With respect to exemplaiy new Claim 29, a combination of the cited art does not teach or 
suggest '"vviierein the metiiod described in claim 22 is emlwdicd as an add-on software 
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componenf " (supported in the original spceification in paragraph [0028J). "the method further 
CGmprising: 

adding the add-on software component to an enterprise solution before shipping the 
eniernribe sot\\v<jrc otnuuon lo a customer, wherein the enterprise soln(.ic>n is based on the iirsl 
process", as also supported in paragraph [0028], 

With respect to exemplary new Claim 30. a combination of the cited art does not teach or 
suggesl "wherein the first VAF figcnt and ihc second VAF agent are controlled by a single VAF 
tool ", as supported in the original spccificaiiot! by element i02 in FIG, 1 and in paragraph 

[00 nj. 

Witli respect to exemplary new Clmm 31, a eomhination of the cited art does not teach or 
suggest "wherein the first process representation ajad the second process representation are 
depicted as: graphs" , as supported in the original specification by FIG. 2 and in paragraph [G009]. 
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As Uk" ciied pi it)!- art does not teach or suggest all of tlie limifadons of ilio pending 
claims. Applicants now respeciiblly request a Notice of Allowance ibr all pending claims. 

If the Examiiicr believes thai a telephone call would be useful in promoting the pending 
claims to allowance, a telephone call to the undersigned at 512.306.0796 would be greatly 

appreciated. 

No extension of time for this response is believed to be necessary. However, in the event 
an extension of time is required, that extension of time is hereby requested; Please charge atiy 
fee associated with an extension of time as well as any odier fee necessary to further the 
prosecution of this application to IBM CORPORATION DEPOSIT ACCOUNT No. 09-0461. 



Respectfully submitted, 




James E. Boice 
Regislration No. 44, 545 
LAW OFFICE QF JIM BOICE; 
3839 Bee Caw Road 
Suite 201 

West Lake Hills, Texas 78746 
512,306.1200 



ATTORNEY FDR APPLIGAMT(S) 
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